Red Hat vulnerabilities
2,567 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-18651389-ds-base: 389-ds-base: sasl plain bind installs connection credentials before account-lock check, allowing continued access as a locked…
- CVE-2026-18508Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite
- CVE-2026-68742Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr
- CVE-2026-6695Gimp: gimp: remote code execution via crafted paa file
- CVE-2026-6694Gimp: gimp file-png plugin: denial of service via oversized apng trns chunk
- CVE-2026-18573Keycloak-services: keycloak-services: client access-type policy condition bypass during client update
- CVE-2026-18572Keycloak-services: keycloak-services: uma claim token can override authorization time-policy evaluation attributes
- CVE-2026-18571Keycloak-services: keycloak-services: fgap v2 group assignment bypass during user creation
- CVE-2026-18570Keycloak-services: keycloak-services: full-scope-disabled client policy validation bypass via omitted fullscopeallowed
- CVE-2026-18141Aap-gateway: aap-gateway: authentication bypass in event-driven ansible via forged http header
- CVE-2026-18358Gnome-remote-desktop: gnome-remote-desktop system-mode rdp server missing connection throttling allows unauthenticated denial of service
- CVE-2026-11770389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check
- CVE-2026-15722389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing
- CVE-2026-10079Stackrox: stackrox: deploy-time policy enforcement and visibility bypass via label injection
- CVE-2026-18209Keycloak-services: keycloak-services: oidc redirect_uri fragment bypass in http parameter pollution check
- CVE-2026-18206Keycloak-services: keycloak-services: client policy source-host wildcard domain matching bypass
- CVE-2026-18214Keycloak-services: keycloak-services: google external access-token exchange bypasses hosted-domain restriction
- CVE-2026-18203Keycloak-services: keycloak-services: group policy extendchildren matches sibling group path prefixes
- CVE-2026-18211Keycloak-services: keycloak-services: secure-client-uris policy bypass via localhost-prefixed domains
- CVE-2026-18208Keycloak-services: keycloak-services: inactive out-of-audience token introspection leaks signed jwt claim
- CVE-2026-16105Keycloak-services: keycloak-services: missing per-role authorization on rolecontainerresource composite endpoints
- CVE-2026-18215Keycloak-services: keycloak-services: microsoft external access-token exchange bypasses configured tenant
- CVE-2026-18217Keycloak-services: keycloak-services: saml http-redirect binding response preserves query string leading to parameter pollution
- CVE-2026-18218Keycloak-services: keycloak-services: client not-before revocation ignored when realm not-before is older but nonzero
- CVE-2026-18157Yggdrasil-worker-package-manager: yggdrasil-worker-package-manager: remote code execution via apt argument injection
- CVE-2026-68563Ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: information disclosure of postgresql data via insecure backup permissions
- CVE-2026-68562Ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: information disclosure via leapp report tampering
- CVE-2026-58216Samba: kpasswd service: kpasswd packet that contains malformed asn.1 might cause the server to access 6 bytes of unallocated memory leading server to crash
- CVE-2026-58222Samba: samba ad ldap compare filter injection and trusted-request confusion disclose protected attributes
- CVE-2026-58218Samba: dns signing dos via tkey name cache exhaustion